From: Frank Brehm <frank@brehm-online.com>
Date: Tue, 28 Feb 2023 17:43:13 +0000 (+0100)
Subject: committing changes in /etc made by "/usr/bin/apt full-upgrade -y"
X-Git-Url: https://git.uhu-banane.org/?a=commitdiff_plain;h=c459b187e2cc2bdcffaec4b440cc24c2d23fbc88;p=config%2Fbruni%2Fetc-mint-new1.git

committing changes in /etc made by "/usr/bin/apt full-upgrade -y"

Packages with configuration changes:
-openjdk-8-jre-headless 8u352-ga-1~22.04 amd64
+openjdk-8-jre-headless 8u362-ga-0ubuntu1~22.04 amd64

Package changes:
-cargo 0.62.0ubuntu0libgit2-0ubuntu0.22.04.1 amd64
+cargo 0.66.0+ds0ubuntu0.libgit2-0ubuntu0.22.04 amd64
-google-cloud-cli 419.0.0-0 all
+google-cloud-cli 420.0.0-0 all
-libgnutls30 3.7.3-4ubuntu1.1 amd64
+libgnutls30 3.7.3-4ubuntu1.2 amd64
-libstd-rust-dev 1.61.0+dfsg1-1~exp1ubuntu0.22.04.1 amd64
+libstd-rust-1.65 1.65.0+dfsg0ubuntu1-0ubuntu0.22.04.1 amd64
+libstd-rust-dev 1.65.0+dfsg0ubuntu1-0ubuntu0.22.04.1 amd64
-openjdk-11-jre 11.0.17+8-1ubuntu2~22.04 amd64
-openjdk-11-jre-headless 11.0.17+8-1ubuntu2~22.04 amd64
-openjdk-8-jdk 8u352-ga-1~22.04 amd64
-openjdk-8-jdk-headless 8u352-ga-1~22.04 amd64
-openjdk-8-jre 8u352-ga-1~22.04 amd64
-openjdk-8-jre-headless 8u352-ga-1~22.04 amd64
+openjdk-11-jre 11.0.18+10-0ubuntu1~22.04 amd64
+openjdk-11-jre-headless 11.0.18+10-0ubuntu1~22.04 amd64
+openjdk-8-jdk 8u362-ga-0ubuntu1~22.04 amd64
+openjdk-8-jdk-headless 8u362-ga-0ubuntu1~22.04 amd64
+openjdk-8-jre 8u362-ga-0ubuntu1~22.04 amd64
+openjdk-8-jre-headless 8u362-ga-0ubuntu1~22.04 amd64
-python3-pip 22.0.2+dfsg-1ubuntu0.1 all
-python3-pip-whl 22.0.2+dfsg-1ubuntu0.1 all
+python3-pip 22.0.2+dfsg-1ubuntu0.2 all
+python3-pip-whl 22.0.2+dfsg-1ubuntu0.2 all
-rustc 1.61.0+dfsg1-1~exp1ubuntu0.22.04.1 amd64
+rustc 1.65.0+dfsg0ubuntu1-0ubuntu0.22.04.1 amd64
---

diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security
index d5d429a..7c546b9 100644
--- a/java-8-openjdk/security/java.security
+++ b/java-8-openjdk/security/java.security
@@ -528,7 +528,7 @@ jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \
 # can be included in the disabledAlgorithms properties.  These properties are
 # to help manage common actions easier across multiple disabledAlgorithm
 # properties.
-# There is one defined security property:  jdk.disabled.NamedCurves
+# There is one defined security property:  jdk.disabled.namedCurves
 # See the property for more specific details.
 #
 #
@@ -605,6 +605,7 @@ jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \
 #
 jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
     RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \
+    SHA1 usage SignedJAR & denyAfter 2019-01-01, \
     include jdk.disabled.namedCurves
 
 #
@@ -669,7 +670,8 @@ jdk.security.legacyAlgorithms=SHA1, \
 # See "jdk.certpath.disabledAlgorithms" for syntax descriptions.
 #
 jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
-      DSA keySize < 1024, include jdk.disabled.namedCurves
+      DSA keySize < 1024, SHA1 denyAfter 2019-01-01, \
+      include jdk.disabled.namedCurves
 
 #
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security